module "squid_instance_role" {
  source = "../../../modules/iam/roles/ec2_instance_role"

  name_prefix = local.name_prefix
  name        = "squid_instance_role"

  policies_list = [
    module.ip_and_domain_block_ro.policy.arn
  ]

  common_tags = merge(
    local.common_tags,
    {
      service                  = "VPN",
      plat_env_project_service = "${local.aggregated_tag}_VPN"
    }
  )
}

/* module "squid_instance_1" {
  source = "../../../modules/ec2/ec2"

  name_prefix     = "${local.name_prefix}-squid"
  instances_count = 1
  ami             = "ami-0993c3c4989c7ca04"
  instance_type   = "t3.micro"
  use_public_ip   = false
  key_name        = "${local.name_prefix}-default"
  security_groups = [
    data.aws_security_group.remote_access.id,
    data.aws_security_group.squid.id
  ]
  subnet_ids           = [data.aws_subnets.private_subnets.ids[0]]
  iam_instance_profile = module.squid_instance_role.profile.name
  root_volume_size     = 8
  root_volume_type     = "gp3"
  encrypted            = true
  kms_key_id           = data.aws_kms_alias.default_ebs_key.target_key_arn

  instance_tags = {
    os_platform     = "linux",
    os_distribution = "amazon",
    splunk          = "true",
  }

  common_tags = merge(
    local.common_tags,
    {
      service                  = "VPN",
      plat_env_project_service = "${local.aggregated_tag}_VPN",
    }
  )
}

module "openvpn_instance1" {
  source = "../../../infrastructure/modules/ec2_openvpn_v2"

  name_prefix = local.name_prefix
  key_name    = "${local.name_prefix}-default"
  sg_list = [
    data.aws_security_group.vpn.id,
    data.aws_security_group.vpn_access.id,
    data.aws_security_group.vpn_ssh.id,
  ]
  subnet               = data.aws_subnets.public_subnets.ids[1]
  iam_instance_profile = module.openvpn_instance_role.profile.name
  instance_index       = "1"
  ami                  = "ami-0c4285eef44128b37"
  default_private_ip   = "10.50.12.148"
  encrypted            = true
  kms_key_id           = data.aws_kms_alias.default_ebs_key.target_key_arn
  root_volume_size     = 20

  common_tags = merge(
    local.common_tags,
    {
      service                  = "VPN",
      plat_env_project_service = "${local.aggregated_tag}_VPN"
    }
  )
} */